Go/github.com/casdoor/casdoor CVE-2026-5468: medium 5.4, EPSS 0.19%

Casdoor vulnerable to Stored XSS via Application formCss / formSideHtml in github.com/casdoor/casdoor

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-5697
• nvd: CVE-2026-5468
• https://github.com/advisories/GHSA-w799-7525-rpr6
• https://vuldb.com/submit/781770
• https://vuldb.com/vuln/355072
• https://vuldb.com/vuln/355072/cti

CVE-2026-5468 · published 2026-06-25T22:34:38Z · modified 2026-06-25T23:01:27.675919382Z · JSON